The Mole - Another Automatic SQL Injection exploitation tool

[Nytro]

The Mole - Another Automatic SQL Injection exploitation tool

The Mole is an automatic SQL Injection exploitation tool. Only by providing a vulnerable URL and a valid string on the site it can detect the injection and exploit it, either by using the union technique or a boolean query based technique.

Features

• Support for injections using Mysql, SQL Server, Postgres and Oracle databases.
  
• Command line interface. Different commands trigger different actions.
  
• Auto-completion for commands, command arguments and database, table and columns names.
  
• Support for query filters, in order to bypass certain IPS/IDS rules using generic filters, and the possibility of creating new ones easily.
  
• Exploits SQL Injections through GET and POST methods.
  
• Developed in python 3.
  

Video Demonstration:

1.) Installation Guide

2.) Tutorial to Use

3.) Download Mole

Download:

http://themole.sourceforge.net/?q=downloads

Sursa: The Mole - Another Automatic SQL Injection exploitation tool | The Hacker News (THN)